Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
File:                     tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft (raw, json)
Hash identifier:          zY49aKgafGXrbDDTOVS4W7ooYc8+C+bv+eoo2uErRe0=
Subject key identifier:   2B:88:4A:EA:24:DF:EE:16:4D:40:2C:BC:59:F6:F6:C5:A1:0A:4C:91
Authority key identifier: B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05
Certificate issuer:       /CN=A916A0AF/serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105
Certificate serial:       0617
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
Manifest number:          0691
Signing time:             Thu 16 Apr 2026 22:46:52 +0000
Manifest this update:     Thu 16 Apr 2026 22:46:51 +0000
Manifest next update:     Thu 23 Apr 2026 22:46:51 +0000
Files and hashes:         1: tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl (hash: Dink/qSXdbelJK2/M2IlDq58VD0008SazEyyHCbSwd8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl
                          rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1559 (0x617)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A0AF, serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105
        Validity
            Not Before: Apr 16 22:46:51 2026 GMT
            Not After : Apr 23 22:46:51 2026 GMT
        Subject: CN=69e166dc-d1c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:11:58:07:38:af:10:b3:43:e9:3d:5a:de:3c:
                    ab:76:98:96:51:23:38:15:36:a4:44:cb:b7:dc:ee:
                    10:af:fc:34:a4:e2:95:00:bd:b9:c6:cd:6f:05:a0:
                    28:8e:af:c0:c0:aa:aa:e4:99:f3:c4:27:11:32:3b:
                    25:b7:41:ab:01:bf:af:ba:07:75:06:1b:e5:dc:96:
                    31:16:2d:f5:bb:e6:09:d9:ce:c7:4e:d7:60:1d:46:
                    66:99:a5:8c:29:27:33:36:12:25:47:f2:e4:6b:5d:
                    a7:78:e7:6a:f7:0a:de:b6:ce:5b:7b:95:94:40:eb:
                    6c:86:a2:85:d8:7d:38:9c:f1:0c:aa:ff:8f:15:cf:
                    b9:f4:df:6b:a4:0e:bf:82:5c:7b:eb:2a:1d:81:f7:
                    42:54:4a:e7:e4:23:fa:e4:19:5d:2b:cf:4b:b8:8d:
                    2b:46:29:33:f5:65:3c:da:dd:b6:6c:cf:2e:19:83:
                    d7:b6:09:c5:8c:fe:7d:42:ba:05:16:7b:1b:31:cd:
                    a1:07:b6:8c:70:ab:98:80:19:a3:0e:45:8a:16:be:
                    02:cf:71:22:50:12:d5:29:22:f8:48:a2:4b:2c:f1:
                    b0:12:ba:ce:8b:da:b7:d0:be:34:16:52:7d:34:a2:
                    03:24:94:83:ed:99:92:07:77:b2:b4:fe:c3:1d:2a:
                    f7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:88:4A:EA:24:DF:EE:16:4D:40:2C:BC:59:F6:F6:C5:A1:0A:4C:91
            X509v3 Authority Key Identifier:
                keyid:B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:1a:9e:d6:e6:5e:1c:63:7e:dd:14:7d:06:86:c4:77:c9:88:
         f9:85:57:ce:fb:b2:c8:bf:0e:18:45:00:ae:41:90:f7:b3:d0:
         3d:a1:66:0a:c7:54:9a:f2:a9:4d:97:99:80:b4:53:ba:f8:ed:
         92:c1:1e:39:2e:85:9b:01:d4:1c:ba:84:c9:17:31:aa:be:8c:
         96:94:2a:41:28:d5:06:47:50:9f:32:d3:f3:f3:3f:a6:e5:d5:
         c8:41:dc:5e:a9:ce:56:e0:ed:3a:26:69:f0:d9:3f:a5:9a:84:
         9b:8d:f1:bc:00:2f:af:65:21:86:c7:23:e8:a0:03:fd:bb:cb:
         63:87:35:90:39:bb:5b:df:9d:bf:44:79:e7:3e:c0:33:e5:58:
         72:34:c1:92:d9:8b:22:29:bf:84:6b:64:f0:19:ee:ca:6e:99:
         e5:9a:a3:e5:ed:33:5e:6c:f2:8a:af:d0:52:98:ab:80:26:db:
         2c:64:2e:69:ad:47:cf:81:55:9c:d1:6c:55:a1:48:d5:8c:23:
         df:40:c9:c7:46:bd:34:70:10:88:bc:1d:68:e3:c0:b5:f0:51:
         56:f6:9d:f6:18:35:06:e3:db:72:88:bd:d4:fd:d3:0b:26:31:
         c9:0d:4f:fb:7f:e7:d3:9d:4d:cb:f7:e5:07:75:3b:e3:ba:72:
         47:f8:d6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:05:59 2026 by rpki-client